Privacy Policy

Effective date: October 19, 2026 · Applies to the IncogSnap mobile app (Android and iOS) and incogsnap.com

1. Who we are

“IncogSnap”, “we”, “us” and “our” refer to the team that publishes the IncogSnap app. You can reach us at contact@bzotech.com.

2. Information we do not collect

• IncogSnap itself does not require or collect your name, email address, phone number, contacts, location, social media accounts or any other account information — there are no user accounts.
• We do not receive or store the content of your messages, photos or videos.
• We do not scan, list or upload your photo library. The app reads a single photo or video only when you choose one yourself, as described in section 3.4. The camera and microphone are used only as described in section 3.3.
• We do not receive your biometric data. Fingerprint / Face ID checks for App Lock are performed by your device’s operating system.

The only exception is data that third-party advertising SDKs may collect on their own, as described in section 4.

3. Information processed to make the app work

3.1 Room codes and connection setup

When you create a room, the app generates a random 6-digit code (also shown as a QR code and invite link) and stores a temporary connection offer under that code in Google Firebase Realtime Database. When a friend joins, they write back a connection answer and the apps exchange temporary public encryption keys (never private keys) and network candidates (technical connection information that can include IP addresses) through the same record. This data exists only so the two phones can “handshake” and find each other. It is deleted immediately once the peer-to-peer connection is established, or automatically after 10 minutes if nobody joins. Firebase is operated by Google, which may process technical logs (such as request IP addresses) under its own terms.

3.2 Messages, photos and videos

Once connected, messages, photos and video are sent directly between the devices in the room over a WebRTC connection, which is encrypted in transit. IncogSnap adds its own end-to-end encryption on top (X25519 key exchange and XSalsa20-Poly1305 authenticated encryption, implemented with the open-source TweetNaCl library), so only the devices in the room can read the content. A fresh key pair is created for every session and exists only temporarily in your device’s memory. In a group room (up to 6 people), every pair of devices has its own independent encrypted channel — there is no shared group key. Content does not pass through or get stored on IncogSnap servers, and we have no technical ability to read it. To connect through some networks, WebRTC may use STUN or TURN relay services; a relay can see network addresses and encrypted traffic but not the content.

3.3 Camera, microphone and temporary files

The app requests camera permission so you can take photos and record short video clips, and microphone permission so you can record clips with sound and make video calls with the person you are chatting with. They are used only while you are using those features — the app does not record in the background and does not upload anything to our servers. Video calls (available in 2-person rooms) go directly to the other person and are not recorded or stored by us.

Photos and videos taken with the in-app camera are kept only in a temporary cache inside the app and are never written to your photo library. Both the sender and the recipient can view them again during the chat. They are overwritten with empty data and then permanently deleted from the device when (a) a self-destruct timer that you or the other person set expires, or (b) the chat ends (tapping “End”, using Panic Exit, or when either person leaves the room).

3.4 Photo library (optional)

If you tap Choose from library on the camera screen, the app asks for access to your photo library and reads only the one photo or video you select, in order to send it. The app does not automatically scan, list or upload any other content in your library, and it never edits or deletes the original file. The overwrite-and-delete process described in section 3.3 applies only to the app’s temporary cached copy, not to the original in your library.

3.5 Gemini AI enhancement (optional, bring your own key)

If you choose to use AI photo enhancement, you provide your own Google Gemini API key. The key is stored encrypted only on your device (secure storage backed by Android Keystore / iOS Keychain) and is never sent to us. When you enhance a photo, the app sends that photo from your device directly to Google’s Gemini API using your key. Google’s handling of that data is governed by the Google Privacy Policy and the Gemini API terms that apply to your key. If you do not want this, simply do not enable the feature.

3.6 On-device settings

The app stores preferences such as your language, App Lock and ad consent settings on your device. It also keeps a room log in the Rooms tab — the room code, the time and how the session ended — but never message or photo content. This information stays on your device.

3.7 Reports you send us

If you use Report a problem in Settings or email us to report abuse, harassment, illegal content or a safety concern, we receive the details you choose to submit, such as the time of the incident, the room code and your description, together with the email address you write from. Because chats are end-to-end encrypted, we cannot read message content ourselves. We use this information only to investigate the report, to take action under our Terms, and to cooperate with law enforcement or child-protection organisations where the law requires or allows.

4. Advertising (Appodeal and Start.io)

The free version of IncogSnap shows ads served through Appodeal (on Android, together with the partner ad networks that Appodeal connects to) and Start.io. Ads are never shown while you are chatting or taking photos.

To deliver and measure ads and prevent fraud, these advertising SDKs — not IncogSnap — may automatically collect information such as your IP address, device and advertising identifiers, device and app information, how you interact with ads and, depending on your device and mobile network, the phone number associated with your SIM, under their own privacy policies. This data is sent directly from the SDK to the advertising partner over an encrypted connection; IncogSnap does not receive, store or use it.

In the EEA and UK, the app asks for your consent (through the Google User Messaging Platform) before loading ads, and you can change your choice at any time in Settings. You can also reset or opt out of the advertising ID in your device settings (Android: Settings → Privacy → Ads; iOS: Settings → Privacy & Security → Tracking). Learn more in the Appodeal Privacy Policy and the Start.io Privacy Policy.

5. How information is shared

We do not sell your personal information. The only third parties involved in running the app are: Google Firebase, for the peer-to-peer connection handshake; Appodeal (together with its partner ad networks) and Start.io, for advertising — these may receive your IP address, advertising identifier and phone number as described in section 4; and the Google Gemini API, only if you enable it with your own key. Because we do not hold message content or account data, we have nothing about your conversations to disclose in response to a legal request beyond what is described in this policy.

6. Retention

• Room / connection data: deleted once connected, or after 10 minutes at most.
• Messages, photos and video: exist only on the devices in the room and are deleted when the self-destruct timer expires or the chat ends.
• Temporary files: overwritten with empty data and deleted when the self-destruct timer expires or the chat ends. Originals you chose from your photo library are not affected.
• Reports you send us: kept only as long as needed to investigate the report and meet our legal obligations.
• Gemini API key, room log and settings: kept on your device until you remove them, clear the app’s data or uninstall the app.
• Advertising data: retained by Appodeal, its partners and Start.io under their own policies.

7. Security

We use end-to-end encrypted peer-to-peer connections, secure hardware-backed storage for your API key, screenshot and screen-recording protection, optional biometric App Lock and a Panic Exit feature. No system is perfectly secure, and content shown on a screen can still be photographed by another device, so please share responsibly.

8. Children

IncogSnap is intended only for people aged 17 and over and is not directed to children. We do not knowingly collect personal information from anyone under this age, and we do not allow people under 17 to use the app. If we learn that a minor is using the app in violation of this policy, we will take appropriate action. If you believe a minor has used the app, contact us at contact@bzotech.com. See also our Child Safety Standards.

9. Your rights and choices

Because IncogSnap does not maintain accounts or store data that identifies you, there is generally no personal profile for us to access, correct or delete. You control your data on your device: see Account & Data Deletion. Depending on where you live (for example the EEA, UK or California), you may have rights to access, delete or object to the processing of personal data held by us or by our providers. Contact us and we will help; for advertising data, you can also contact Appodeal and Start.io directly through their privacy policies linked in section 4.

10. International processing

Our service providers (such as Google, Appodeal and Start.io) may process data in countries other than your own. Where required, they rely on appropriate safeguards for international transfers.

11. Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it was last changed. Material changes will be reflected here and, where appropriate, in the app.

12. Contact

Questions or requests about privacy: contact@bzotech.com.